KB5070632: Some devices are temporarily unable to upgrade to Windows 11, version 24H2 or 25H2

Symptoms

When you try to upgrade to Windows 11, versions 24H2 or 25H2, you might encounter an upgrade compatibility hold and receive the following message: 

• This PC can't be upgraded to this version of Windows.

• Your PC isn't supported yet on this version of Windows. Windows Update will automatically offer you this version of Windows once the issue has been resolved.

Cause

Some devices including Microsoft Teams Rooms (MTR) might boot to a BitLocker recovery screen while upgrading to Windows 11, versions 24H2 or 25H2. The user is then required to enter their BitLocker recovery key to continue.

This issue has been identified and is linked to a firmware configuration on these devices involving the Secure Boot Allowed Signature Database, which ensures that only trusted software is allowed to run during the system boot process. 

To safeguard your upgrade experience, we have applied a compatibility hold on devices that contain the affected certificate for the UEFI Secure Boot Allowed Signature Database. These devices will not be offered to install Windows 11, versions 24H2 or 25H2, via the Windows Update ​​​​​​​release channel. IT administrators using Windows Update for Business reports can check this issue using its Safeguard ID 59739237 for Windows 11, version 24H2 and Safeguard ID 59770930 for Windows 11, version 25H2. 

Next Steps

Microsoft is working on a resolution in collaboration with the original equipment manufacturers (OEMs). Windows Update will automatically offer you this version of Windows once the issue has been resolved.